Manage Devices

This feature helps you to authorize all USB Devices and system internal devices (Example: Bluetooth, Webcam). Authorized devices can be allowed or blocked at EPS client system when configured though policy. This authorization must be done for every USB storage device to manage the devices in the EPS environment.

Cleaning USB device

Before adding a device to the Device Control tool (dcconfig tool), clean the disk.

To clean the disk, follow these steps:

1. Connect the device.
2. On the command prompt, type the following commands one by one:
   diskpart
   list disk
   Select disk <#>
   clean
   convert mbr
3. After clean up, create partition on the disk.

Now the disk is ready to be added.

Viewing details of devices

To view details of devices, follow these steps:

1. Log on to the Seqrite Endpoint Security Web console.
2. Go to Admin Settings > Server > Manage Devices.
   A list appears which contains devices which can be added to the device exceptions in Device Control settings.
   The list displays the following details of the devices:

Adding device where EPS client is installed/ not installed

To add the device where EPS client is installed/ not installed, follow these steps:

1. Log on to the Seqrite Endpoint Security Web console.
2. Connect the clean device.
3. Go to Admin Settings > Server > Manage Devices.
4. Select Add Devices > USB Devices. Add Device dialog appears.
5. Click the link click here to download Device Control package.
6. Extract the zip file DEVCTRL.7Z.
7. From the devctrl folder, double click the dcconfig.exe file.
8. The device details appears in the Device control dialog. In the Device name box, enter device name.
9. To authorize the device, do one of the following:
   • If you are using the system where the EPS client is installed, the available encryption options are:
     • No encryption
     • Partial encryption
     • Full encryption
   • If you are using the system where the EPS client is not installed, encryption is not available.
   • To apply the encryption, refer the following table:

10. Click Save to File. A file dcinfo.dat is created.
11. Save dcinfo.dat file in the devctrl folder.
12. Go to Admin Settings > Server > Manage Devices.
13. Select Add Devices > USB Devices. Add Device dialog appears.
14. Click Browse and upload file dcinfo.dat.
15. Click Apply.

The device is added to the device exceptions and appears in the list.

Adding device in the dcconfig tool through Admin folder

To add device in the dcconfig tool through Admin folder

1. Connect the clean device.
2. On the Seqrite Endpoint Security server, browse to the folder “\Seqrite\Endpoint Security 7.60\Admin”
3. Double click dcconfig.exe file. Device Control dialog appears.
4. Click Retrieve button to view the details of the device attached.
5. The device details appears in the Device control dialog. In the Device name box, enter device name.
6. To authorize the device, the available encryption options are:
   • No encryption
   • Partial encryption
   • Full encryption

To apply the encryption, refer the following table:

7. Click Add.

Partial encryption supports only NTFS. No encryption and full encryption support all the file systems.

Adding exceptions to the device control policy

You can add exceptions for removable devices that are used by authorized persons so that the devices are excluded from the policy.

1. Log on to the Seqrite Endpoint Security Web console.
2. Go to Admin Settings > Server > Manage Devices.
3. Select the device category from the Add Device**s** drop down list. The following device categories are displayed:
   • Network Device: A list of devices connected to the network is automatically displayed. Select the devices that you want to manage. Click OK.
   • USB Devices: Use this option if you want to add a USB device that is not in the Network Device list and not connected.
   • USB by Model: Use this option. If your organization has a large number of USB storage devices of the same make and model. You can add these USBs by model name. The Add device by Model Name dialog box appears. Enter the Device Name. Select a mode from the Add Model Name list box. The following modes are displayed:
     • Automatically: The device model name is automatically displayed if a USB mass storage device is attached to the Windows operating system.
       

         - Automatically fetching of model name  is not supported on Mac operating system.

     • From the list: A list of pre-specified device model names appears. Select a model name from the list.
     • Manually: Enter Model Name. Follow the procedure mentioned on the dialog box.
       

       If same USB storage device is authorized as USB Device and USB by Model, the priority will be given to the Model name.

   • USB by Serial Number: Use this option to add the USB by serial number without connecting the USB. The Add device by Serial Number dialog box appears. Enter the Device Name. Enter the Serial Number. Click OK.
   • Other devices: Use this option if you want to add a device that is not connected, and not in the list. Select the device type and enter the corresponding details for that device.
4. Select the devices that you want to manage from the displayed list and click OK.After the device appears in the list, toggle the button under Authorized to Yes or No as required. You can also use the Edit icon that appears to change the device name as it appears or use the Trash box icon to delete the device from the list.

   If you set the device authorized permission to ‘No’, then that device cannot be added to the exceptions list.

5. To add the device to the exceptions list, go to Settings > Client Settings > Advanced Device Control.
6. Click Exceptions.
7. Click Add. The Managed Devices dialog box displays the list of authorized devices.
8. Toggle the Add to Exceptions button for that device.
9. Click OK.
10. Click Yes on the Managed Devices confirmation dialog box. The device is now added in the list of exceptions.To delete a device, select the device, and then click the Trash icon that appears.
11. Set the access permissions as required.
12. Click Save Policy.

• In case you are accessing Web console on Windows Vista, turn off the ‘Protected Mode’ option in Internet Explorer.
• If you are unable to add devices through the Web console, you can also use the Device Control Tool to add USB Storage devices. This tool is available at the following location on the EPS Server: \Admin\dcconfig.exe
• Add device functionality will not work with Edge browser on Windows 10 operating system and on Google Chrome 44 and later versions.